CVE-2025-49154: An insecure access control vulnerability in Trend Micro Apex One and Trend Micro Worry-Free Business Security

Routine

HIGH 8.7DOWNGRADEUPGRADEUPGRADE

CVE-2025-49154 is a high-severity flaw (CVSS 8.7) affecting worry-free business security, worry-free business security services, apex one. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.

An insecure access control vulnerability in Trend Micro Apex One and Trend Micro Worry-Free Business Security could allow a local attacker to overwrite key memory-mapped files which could then have severe consequences for the security and stability of affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.

Why this priority

High severity

A fixed release or distro patch exists.

Risk facts

CVSS score	8.7 (High)
Attack vector	Local
Attack complexity	Low
Privileges needed	Low
User interaction	None
EPSS exploit chance	0.1% (top 98%)
CISA exploited list	No
Weakness	CWE-284
Published	2025-06-17
Last modified	2026-06-17

Publisher (CNA): Trend Micro, Inc. · Vendor: trendmicro

Last updated 2026-06-17 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score

Am I affected?

Timeline

2025-06-17 19:15 UTCPublished CVE record published
2026-06-17 09:30 UTCUpdated Record last modified

trendmicro worry-free business security DOWNGRADE

Affected: 10.0 sp1

Fixed in: no fixed release known

Safe to downgrade to: a release before 10.0

1. Check installed version

apt-cache policy worry-free-business-security || rpm -q worry-free-business-security || worry-free-business-security --version

2. No fixed release: DOWNGRADE to a release before 10.0 (Debian / Ubuntu)

apt-cache madison worry-free-business-security sudo apt install worry-free-business-security=<VERSION_BEFORE_10.0> sudo apt-mark hold worry-free-business-security

2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)

dnf --showduplicates list worry-free-business-security sudo dnf downgrade worry-free-business-security-<VERSION_BEFORE_10.0> sudo dnf versionlock add worry-free-business-security

Downgrade risk

Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host.

After downgrade

Restart the service, and keep the package held until a fixed release ships.

trendmicro worry-free business security services UPGRADE

Affected: >= 6.7.0.0 and < 6.7.3954 · >= 14.0.0 and < 14.3.1299

Fixed in: 6.7.3954, 14.3.1299

Safe to downgrade to: a release before 6.7.0.0

1. Check installed version

apt-cache policy worry-free-business-security-services || rpm -q worry-free-business-security-services || worry-free-business-security-services --version

2. UPGRADE to 6.7.3954 (Debian / Ubuntu)

sudo apt update && sudo apt install --only-upgrade worry-free-business-security-services

2. UPGRADE (RHEL / Amazon Linux / Fedora)

sudo dnf upgrade worry-free-business-security-services

Note

Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog.

3. If no update is available yet, DOWNGRADE to a release before 6.7.0.0 (Debian / Ubuntu)

apt-cache madison worry-free-business-security-services sudo apt install worry-free-business-security-services=<VERSION_BEFORE_6.7.0.0> sudo apt-mark hold worry-free-business-security-services

3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)

dnf --showduplicates list worry-free-business-security-services sudo dnf downgrade worry-free-business-security-services-<VERSION_BEFORE_6.7.0.0> sudo dnf versionlock add worry-free-business-security-services

Downgrade risk

Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host.

After downgrade

Restart the service, and keep the package held until a fixed release ships.

trendmicro apex one UPGRADE

Affected: < 14.0.14492 · >= 14.0.0.12994 and < 14.0.0.14002

Fixed in: 14.0.0.14002, 14.0.14492

Safe to downgrade to: a release before 14.0.0.12994

1. Check installed version

apt-cache policy apex-one || rpm -q apex-one || apex-one --version

2. UPGRADE to 14.0.0.14002 (Debian / Ubuntu)

sudo apt update && sudo apt install --only-upgrade apex-one

2. UPGRADE (RHEL / Amazon Linux / Fedora)

sudo dnf upgrade apex-one

Note

Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog.

3. If no update is available yet, DOWNGRADE to a release before 14.0.0.12994 (Debian / Ubuntu)

apt-cache madison apex-one sudo apt install apex-one=<VERSION_BEFORE_14.0.0.12994> sudo apt-mark hold apex-one

3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)

dnf --showduplicates list apex-one sudo dnf downgrade apex-one-<VERSION_BEFORE_14.0.0.12994> sudo dnf versionlock add apex-one

Downgrade risk

Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host.

After downgrade

Restart the service, and keep the package held until a fixed release ships.

Verify at the official source NVD · CVE Program · Report a problem with this page
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.

Quick answers

How do I fix CVE-2025-49154?

worry-free business security: downgrade or apply the listed mitigation; worry-free business security services: upgrade to 6.7.3954, 14.3.1299; apex one: upgrade to 14.0.0.14002, 14.0.14492. Exact commands for each OS are on this page.

Is CVE-2025-49154 being exploited?

CVE-2025-49154 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.

What does CVE-2025-49154 affect?

CVE-2025-49154 affects worry-free business security, worry-free business security services, apex one. Severity is high (CVSS 8.7). An insecure access control vulnerability in Trend Micro Apex One and Trend Micro Worry-Free Business Security could allow a local attacker to overwrite key memory-mapped files which could then have severe consequences for the security and s

How urgent is CVE-2025-49154?

Priority 31/100. High severity

Software pages

Trend Micro vulnerabilities

References

← Back to latest CVEs